Privacy Policy

Last Updated: April 10, 2025

At Harmony, we believe that having a safe space to share our thoughts and feelings — a place where we feel comfortable — is crucial to emotional healing, personal development, and our well-beings. We seek to support those goals by only using the data necessary for Harmony's core functionality, being transparent about what we collect and why, and taking appropriate measures to protect and secure your data.

Below, we outline what data we collect, how we use it, who we share it with, and your rights as a user.

1. Information We Collect

Basic account info — Your name and email address, provided at the time of registration (e.g., via Google login).

Conversation history — We store your sessions so you can access your conversation history.

Technical metadata — We may receive metadata such as your browser type or device info (through services like Clerk) to help us debug technical issues and ensure the app functions properly.

2. How We Use Your Data

We use your data to:

Store, retrieve, and give you access to your conversation history
Remember your setting preferences (like manual mode, mic settings, etc.)
Keep you signed in across different sessions and allow access from multiple devices

We do not — and will never — sell your personal data.

We only share your data when necessary to provide app functionality, and only with trusted third-party services:

Clerk – for user authentication and account management
Hume.ai – for emotion detection and transcription
AI by OpenAI and Anthropic – for underlying intelligence and conversation generation

4. Your Rights

You have the right to:

Delete your account and associated data
Contact us with questions about your data or privacy

To exercise your rights, you can delete your account in-app at any time, or email us at team@harmonyappai.com.

5. Data Storage and Security

We use Supabase, a secure and widely trusted cloud infrastructure provider, to store and protect your data. Supabase uses encryption to protect data at rest and in transit, and access is restricted to authorized personnel only. All data transmitted between you and our services is secured using strong encryption protocols. This includes the use of HTTPS and WebSocket Secure (WSS), which ensure that your data remains private and integral throughout the transmission process. We follow industry best practices to ensure that your data remains safe and confidential.

6. Changes to This Policy